Microsoft Dataverse
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | MicrosoftDataverse |
| Publisher | Microsoft |
| Used in Solutions | Microsoft Business Applications |
| Collection Method | Unknown |
| Connector Definition Files | mainTemplate.json |
| Microsoft Learn | View on Learn |
Microsoft Dataverse is a scalable and secure data platform that enables organizations to store and manage data used by business applications. The Microsoft Dataverse data connector provides the capability to ingest Dataverse and Dynamics 365 CRM activity logs from the Microsoft Purview Audit log into Microsoft Sentinel.
Additional Information
- 📖 Solution Overview: Microsoft Business Apps solution - Monitor and protect Power Platform and Dynamics 365 environments
- 📖 Deployment Guide: Deploy Power Platform connectors - Prerequisites and setup for Dataverse activity logging
- 📖 Security Content: Power Platform security content reference - Analytics rules for Dataverse threat detection
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
DataverseActivity |
✓ | ✗ | ✓ |
Permissions
Resource Provider Permissions:
- Workspace (Workspace): Read and Write permissions are required.
- Keys (Workspace): Read permissions to shared keys for the workspace are required. See the documentation to learn more about workspace keys
Custom Permissions:
- Tenant Permissions: 'Security Administrator' or 'Global Administrator' on the workspace's tenant.
- Micorosft Purview Audit: Microsoft Purview Audit (Standard or Premium) must be activated.
- Production Dataverse: Activity logging is available only for Production environments. Other types, such as sandbox, do not support activity logging.
- Dataverse Audit Settings: Audit settings must be configured both globally and at the entity/table level. See the documentation to learn more about Dataverse audit settings.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Connect Microsoft Dataverse audit logs to Microsoft Sentinel
This connector uses the Office Management API to get your Dataverse audit logs. The logs will be stored and processed in your existing Microsoft Sentinel workspace. You can find the data in the DataverseActivity table.
- Click 'Connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊